350-401 ENCOR Cisco Enterprise Network Core Technology 2026

Welcome to Exam 350-401 ENCOR Implementing Cisco Enterprise Network Core Technologies Verified QA Tests CCNP Enterprise 2026Exam Description: Implementing Cisco Enterprise Network Core Technologies v1.1 (ENCOR 350-401) is a 120-minute exam associated with the CCNP and CCIE Enterprise Certifications. This exam tests a candidate's knowledge of implementing core enterprise network technologies, including dual stack (IPv4 and IPv6) architecture, virtualization, infrastructure, network assurance, security, and automation. The course Implementing Cisco Enterprise Network Core Technologies helps candidates to prepare for this exam.The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam1.0 Architecture1.1 Explain the different design principles used in an enterprise network1.1.a High-level enterprise network design such as 2-tier, 3-tier, fabric, and cloud1.1.b High availability techniques such as redundancy, FHRP, and SSO1.2 Describe wireless network design principles1.2.a Wireless deployment models (centralized, distributed, controller-less, controller-based, cloud, remote branch)1.2.b Location services in a WLAN design1.2.c Client density1.3 Explain the working principles of the Cisco SD-WAN solution1.3.a SD-WAN control and data planes elements1.3.b Benefits and limitations of SD-WAN solutions1.4 Explain the working principles of the Cisco SD-Access solution1.4.a SD-Access control and data planes elements1.4.b Traditional campus interoperating with SD-Access1.5 Interpret wired and wireless QoS configurations1.5.a QoS components1.5.b QoS policy1.6 Describe hardware and software switching mechanisms such as CEF, CAM, TCAM, FIB, RIB, and adjacency tables2.0 Virtualization2.1 Describe device virtualization technologies2.1.a Hypervisor type 1 and 22.1.b Virtual machine2.1.c Virtual switching2.2 Configure and verify data path virtualization technologies2.2.a VRF2.2.b GRE and IPsec tunneling2.3 Describe network virtualization concepts2.3.a LISP2.3.b VXLAN3.0 Infrastructure3.1 Layer 23.1.a Troubleshoot static and dynamic 802.1q trunking protocols3.1.b Troubleshoot static and dynamic EtherChannels3.1.c Configure and verify common Spanning Tree Protocols (RSTP, MST) and Spanning Tree enhancements such as root guard and BPDU guard3.2 Layer 33.2.a Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link state, load balancing, path selection, path operations, metrics, and area types)3.2.b Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point, and broadcast network types, and passive-interface)3.2.c Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)3.2.d Describe policy-based routing3.3 Wireless3.3.a Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference, noise, bands, channels, and wireless client devices capabilities3.3.b Describe AP modes and antenna types3.3.c Describe access point discovery and join process (discovery algorithms, WLC selection process)3.3.d Describe the main principles and use cases for Layer 2 and Layer 3 roaming3.3.e Troubleshoot WLAN configuration and wireless client connectivity issues using GUI only3.3.f Describe wireless segmentation with groups, profiles, and tags3.4 IP Services3.4.a Interpret network time protocol configurations such as NTP and PTP3.4.b Configure NAT/PAT3.4.c Configure first hop redundancy protocols, such as HSRP, VRRP3.4.d Describe multicast protocols, such as RPF check, PIM and IGMP v2/v34.0 Network Assurance4.1 Diagnose network problems using tools such as debugs, conditional debugs, traceroute, ping, SNMP, and syslog4.2 Configure and verify Flexible NetFlow4.3 Configure SPAN/RSPAN/ERSPAN4.4 Configure and verify IPSLA4.5 Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management4.6 Configure and verify NETCONF and RESTCONF5.0 Security5.1 Configure and verify device access control5.1.a Lines and local user authentication5.1.b Authentication and authorization using AAA5.2 Configure and verify infrastructure security features5.2.a ACLs5.2.b CoPP5.3 Describe REST API security5.4 Configure and verify wireless security features5.4.a 802.1X5.4.b WebAuth5.4.c PSK5.4.d EAPOL (4-way handshake)5.5 Describe the components of network security design5.5.a Threat defense5.5.b Endpoint security5.5.c Next-generation firewall5.5.d TrustSec and MACsec5.5.e Network access control with 802.1X, MAB, and WebAuth6.0 Automation6.1 Interpret basic Python components and scripts6.2 Construct valid JSON-encoded files6.3 Describe the high-level principles and benefits of a data modeling language, such as YANG6.4 Describe APIs for Cisco DNA Center and vManage6.5 Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF6.6 Construct an EEM applet to automate configuration, troubleshooting, or data collection6.7 Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack